VULNERABILITY INTELLIGENCE

CVE-2022-38380

CVSS score4.3 MEDIUM

EPSS probability22.99%

CISA KEVNot currently listed

Published2022-11-02

Last modified2026-06-17

Description

An improper access control [CWE-284] vulnerability in FortiOS version 7.2.0 and versions 7.0.0 through 7.0.7 may allow a remote authenticated read-only user to modify the interface settings via the API.